Siemens SIMATIC STEP 7 V5.X

Name: Siemens SIMATIC STEP 7 V5.X
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical4high1medium0low

updated 2026-10-24

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-31893US	high7.8	0.56% (46th)	—	V5.6_SP2_HF3	2021-07-13	3 versions
CVE-2017-6865US	medium6.5	0.47% (40th)	—	V5.6	2017-05-11	< V5.6
CVE-2020-7585US	high7.8	0.45% (38th)	—	V5.6_SP2_HF3	2020-06-10	3 versions
CVE-2020-7586US	high7.8	0.42% (36th)	—	V5.6_SP2_HF3	2020-06-10	3 versions
CVE-2021-31894US	high8.8	0.23% (13th)	—	V5.7	2021-07-13	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-427Uncontrolled Search Path Element1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.